Even just having an import statement for it is enough to trigger the malware in 1.82.8.